Vulnerabilities > Qualcomm > Snapdragon 8 GEN 1 Mobile Platform Firmware > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-12-05 | CVE-2023-28551 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments. | 7.8 |
2023-12-05 | CVE-2023-28579 | Classic Buffer Overflow vulnerability in Qualcomm products Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length. | 7.8 |
2023-12-05 | CVE-2023-28580 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache. | 7.8 |
2023-12-05 | CVE-2023-28585 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Memory corruption while loading an ELF segment in TEE Kernel. | 8.8 |
2023-12-05 | CVE-2023-28587 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level. | 7.8 |
2023-12-05 | CVE-2023-28588 | Integer Overflow or Wraparound vulnerability in Qualcomm products Transient DOS in Bluetooth Host while rfc slot allocation. | 7.5 |
2023-12-05 | CVE-2023-33053 | Improper Validation of Array Index vulnerability in Qualcomm products Memory corruption in Kernel while parsing metadata. | 7.8 |
2023-12-05 | CVE-2023-33087 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption in Core while processing RX intent request. | 7.8 |
2023-12-05 | CVE-2023-33088 | NULL Pointer Dereference vulnerability in Qualcomm products Memory corruption when processing cmd parameters while parsing vdev. | 7.8 |
2023-12-05 | CVE-2023-33089 | NULL Pointer Dereference vulnerability in Qualcomm products Transient DOS when processing a NULL buffer while parsing WLAN vdev. | 7.5 |